Summary If you want to build agents that can call Microsoft Graph actions through the Model Context Protocol (MCP), the setup needs a few moving parts: Entra ID permissions, an OAuth client registration, and the MCP server configuration in Agents Toolkit. Get started with the Microsoft MCP Server for Enterprise provides instructions how to set it up and this post will look into using it within Agents toolkit. What we are configuring We will:

Table of Contents Introduction Prerequisites Implementation Guide Creating Your Agent Configuring TypeSpec Files Setting Up Authentication Testing & Troubleshooting Conclusion References Introduction Following on my blog post Declarative Agents: Azure OpenAI API Key Auth with TypeSpec, I decided to try out how to authenticate to Ms Graph using sample Tasks Agent using TypeSpec for Microsoft 365 Copilot that connects to the Microsoft Graph APIs created by Sébatien Levert. Why This Matters: Copilot out of the box can not retrieve data from SharePoint List.